CVE-2026-83681
Full vulnerability record from the local CVENow database.
Description
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-13 19:20:10.407000
Last modified
2026-10-22 22:18:55.420000
View original CVE JSON
{
"id": "CVE-2026-83681",
"sourceIdentifier": "[email protected]",
"published": "2026-10-13T19:20:10.407",
"lastModified": "2026-10-22T22:18:55.420",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Microsoft",
"product": "Microsoft PowerToys",
"versions": [
{
"version": "0.1",
"lessThan": "0.102.0",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-14T16:28:43.319492Z",
"id": "CVE-2026-83681",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1390"
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681",
"source": "[email protected]"
}
]
}